IN THE CLAIMS : 

Please cancel Claim 6, without prejudice or disclaimer of subject matter. Please 
amend Claims 17-20 and 23 and add new Claim 25, as indicated below. The following is a 
complete listing of claims and replaces all prior versions and listings of claims in the present 
application: 

Claim 1 (previously presented): A computer implemented method for dynamically provisioning 
computing resources, said method comprising: 

receiving a request for a computing resource, wherein said request is associated with an 

asset; 

determining an asset classification of said asset, a business value of said asset, and a 
resource classification related to said asset, 

wherein said asset classification is at least one of: a public asset, a business 
confidential asset, a private asset, and a secret asset, 

wherein said business value of said asset is one of: a low value, a medium value, 
and a high value, and 

wherein said resource classification is one of: a trusted classification for internal 
entities and a non-trusted classification for external entities; 

assigning said asset to one of a plurality of security domains based on said determining, 
wherein each security domain corresponds to a respective degree of security control; and 

provisioning said computing resource based on said one of said plurality of security 
domains. 
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Claim 2 (previously presented): The method of claim 1, further comprising determining a data 

classification of said asset. 

Claims 3-8 (cancelled). 

Claim 9 (previously presented): The method of claim 1, further comprising de-provisioning said 
computing resource. 

Claim 10 (previously presented): The method of claim 1, further comprising de-provisioning 
said computing resource when said computing resource is no longer needed by said asset. 

Claim 1 1 (previously presented): The method of claim 1, further comprising verifying a 
software inventory of at least one of: an internal client and an external client. 

Claim 12 (previously presented): The method of claim 1, further comprising applying 
encryption to asset data based on said asset classification. 

Claim 13 (previously presented): The method of claim 1, further comprising defining which 
processes may be suspended if said asset requires an additional computing resource. 

Claim 14 (cancelled). 
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Claim 15 (previously presented): The method of claim 1, further comprising storing policies 
regarding processing assets when computing resources are limited due to a failure of at least one 
of: software and hardware. 

Claim 16 (previously presented): A machine-readable medium having stored thereon a plurality 
of instructions that, when executed by a processor, cause said processor to perform a method 
comprising: 

receiving a request for a computing resource, wherein said request is associated with an 

asset; 

determining an asset classification of said asset, a business value of said asset, and a 
resource classification related to said asset, 

wherein said asset classification is at least one of: a public asset, a business 
confidential asset, a private asset, and a secret asset, 

wherein said business value of said asset is one of: a low value, a medium value, 
and a high value, and 

wherein said resource classification is one of: a trusted classification for internal 
entities and a non-trusted classification for external entities; 

assigning said asset to one of a plurality of security domains based on said determining 
step, wherein each security domain corresponds to a respective degree of security control; and 

provisioning said computing resource based on said one of said plurality of security 
domains. 
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Claim 17 (currently amended): A computer system configured to facilitate dynamic provisioning 
of computing resources, said system comprising a server apparatus with a provisioning engine 
configured to: 

receive a request for a computing resource, wherein said request is associated with an 

asset, 

determine an asset classification, a business value of said asset, and a resource 
classification related to said asset based upon input from a manager component, 

wherein said asset classification is at least one of: a public asset, a business 
confidential asset, a private asset, and a secret asset, 

wherein said business value of said asset is one of: a low value, a medium value, 
and a high value, and 

wherein said resource classification is one of: a trusted classification for internal 
entities and a non-trusted classification for external entities; 

assign said asset to one of a plurality of security domains based on said determining step, 
wherein each security domain corresponds to a respective degree of security control; and 
provision said computing resource based on said one of said plurality of security 
domains. 

Claim 18 (currently amended): The system of claim 17, further comprising a wherein said 
server apparatus is configured to communicate with at least one of: an internal client and an 
external client. 
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Claim 19 (currently amended): The system of claim 17, further comprising a memory storing a 
domain database configured to store of domain rules and policies. 



Claim 20 (currently amended): The system of claim 17, further comprising a connection 
manager instruction module configured to direct at least one of: an internal client and an 
external client to comply with software requirements. 

Claim 21 (previously presented): The system of claim 17, further comprising a policy manager 
instruction module configured to apply encryption to asset data based on said asset classification. 

Claim 22 (previously presented): The system of claim 17, further comprising a configuration 
manager instruction module configured to identify which processes may be suspended if an asset 
requires additional computing resource. 

Claim 23 (currently amended): The system of claim 17, further comprising a risk manager 
instruction module configured to verify software inventory of at least one of: an internal client 
and an external client. 

Claim 24 (previously presented): The system of claim 17, further comprising a recovery 
manager instruction module configured to store policies regarding processing assets when 
computing resources are limited due to at least one of: an equipment failure and a software 
failure. 
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Claim 25 (new): The method of claim 1. further comprising determining a geographical source 
from which said request originates and applying at least one of a patch or a privacy rule based on 
said geographical source determination. 
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